Risky to adopt: the package has had no registry release since August 2015 and no recorded repository commits in the last three months. It is not archived and has matching source documentation, but its long-term inactivity and small project footprint create substantial maintenance risk.
42%
Total Score
33
71
75
The latest release was published in August 2015, with no releases in the last 12 months despite the package being over 11 years old. This strongly suggests the dependency is no longer actively maintained.
The repository recorded zero commits and zero active maintainers during the last three months, consistent with the lengthy gap since the latest release. This is a significant abandonment risk for a framework module.
Only one registry account has publish access, which leaves a thin publishing base. Because the repository is user-owned rather than organization-backed, there is no provided organizational backing to compensate for that concentration.
There are three open issues and no issues or pull requests were created or closed during the last month. The lack of recent issue activity offers little evidence of ongoing support.
The repository has only 8 stars and 9 forks, indicating a small user and contributor footprint. Popularity is supporting evidence rather than decisive, but these numbers provide little resilience against abandonment.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
vova07/yii2-start Version * | — | — |
yiisoft/yii2-bootstrap Version * | — | — |
yiisoft/yii2-swiftmailer Version * | — | — |
vova07/yii2-fileapi-widget Version * | — | — |
vova07/yii2-start-rbac-module Version * | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.